Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
File: sA4l9V67rLBp8QOssIZnA4Nc_M0.mft (raw, json)
Hash identifier: l+DIY8qLL2d8juskWnGalcv8M0JMF6qgIKSbgTEO1zo=
Subject key identifier: 3E:D4:7C:95:72:1C:E9:E7:CC:CA:CE:6E:B9:2F:B7:83:CC:FC:7D:8B
Authority key identifier: B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
Certificate issuer: /CN=b00e25f55ebbacb069f103acb0866703835cfccd
Certificate serial: 019D996212070267024491EC5BAD0F9B52F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
Manifest number: 14CE
Signing time: Fri 17 Apr 2026 03:00:34 +0000
Manifest this update: Fri 17 Apr 2026 03:00:34 +0000
Manifest next update: Sat 18 Apr 2026 03:00:34 +0000
Files and hashes: 1: IxO99c5pFhRvUksjCk8RGNZdHys.roa (hash: axX2zCX5EaVP+cgNK0AwafDUwd4UVfumU6doP/6YeJg=)
2: sA4l9V67rLBp8QOssIZnA4Nc_M0.crl (hash: yF0Gbj5pguIl3iT+UGqHiTo0nLie/d9WAnacNFcAiiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:12:07:02:67:02:44:91:ec:5b:ad:0f:9b:52:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b00e25f55ebbacb069f103acb0866703835cfccd
Validity
Not Before: Apr 17 03:00:34 2026 GMT
Not After : Apr 18 03:00:34 2026 GMT
Subject: CN=3ed47c95721ce9e7cccace6eb92fb783ccfc7d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:ec:dc:fa:64:e3:f0:fb:e1:8f:17:fc:c1:
22:d0:05:43:50:1b:b1:56:07:27:51:f5:27:26:45:
75:7d:e6:50:c5:86:2a:af:b8:d6:5c:85:13:fc:1b:
c4:62:ac:64:1f:59:8c:76:58:16:50:ee:56:50:92:
a7:5a:be:8b:9b:99:eb:50:6f:f7:0a:81:07:50:11:
05:17:ac:b8:3a:7e:49:4e:49:91:c5:96:6f:4c:00:
34:f2:22:83:00:65:52:cb:8c:db:4e:8c:7b:4e:7d:
d9:3d:09:a8:18:8b:2c:be:7e:e2:a9:8e:1d:eb:fd:
59:d8:01:97:db:a1:86:d0:12:c0:e6:d3:0b:7d:41:
8c:3c:60:9f:d7:eb:cf:79:c1:ee:b2:73:38:38:30:
c5:b8:38:0a:29:89:2e:82:4e:aa:dc:10:07:59:46:
78:45:c9:73:70:fe:17:b7:16:3b:8a:ac:8c:52:b3:
0e:f4:f4:ff:7c:30:b3:f0:62:18:f6:f1:0b:90:5b:
5f:b2:85:f2:3b:3d:f1:15:d4:a0:f3:53:6b:00:f5:
4a:30:4f:60:98:2b:2e:2f:f3:08:97:77:64:01:6c:
22:43:bf:45:d4:a7:3a:ba:48:de:92:0f:85:a9:84:
12:6b:a8:82:6a:5b:25:0e:a6:f7:97:81:2e:03:8c:
61:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D4:7C:95:72:1C:E9:E7:CC:CA:CE:6E:B9:2F:B7:83:CC:FC:7D:8B
X509v3 Authority Key Identifier:
keyid:B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:8a:8d:82:ed:94:41:8a:94:69:d3:6f:85:0f:5e:c9:5e:0c:
a9:bf:27:3b:4f:9f:68:a6:8a:57:4b:42:8f:0b:cb:3f:9f:97:
4a:d7:3f:ff:7d:a5:0b:59:1b:22:7b:5a:7a:9f:43:f7:fb:1b:
88:a5:10:0b:15:57:6b:1e:61:63:a4:f6:c0:82:ae:b2:72:bb:
22:a2:e9:f0:ce:07:e2:4e:a9:86:17:f2:82:46:72:28:bf:30:
94:45:e5:e0:a9:de:ff:52:b0:eb:6b:e5:27:c1:87:cd:85:5b:
8a:1b:1e:75:b6:4a:31:97:40:bc:73:e3:2f:28:8b:e3:8c:b0:
5b:69:12:6f:e7:2c:37:76:e0:0f:4c:7a:53:47:99:29:47:4d:
03:41:c4:59:e9:e6:d4:3b:72:41:e6:28:1a:f2:84:a8:fd:57:
c0:69:1c:b8:09:3c:23:49:ca:53:17:2a:aa:34:47:be:dc:07:
c1:61:ef:a9:45:b3:de:79:dc:98:0c:47:df:7a:c8:03:20:0a:
28:de:6f:21:b5:31:2f:15:96:47:b2:15:4c:b0:96:89:62:3f:
e7:01:ec:2a:46:82:21:47:ed:cd:4f:d6:5f:13:8a:5e:7e:3d:
f2:a5:42:3d:01:2b:88:01:fb:4f:3b:19:1a:46:3e:94:1c:b9:
d2:6a:a6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:20:57 2026 by rpki-client